Chapter 4 of 4 · Microsoft SC-900
Capabilities of Microsoft Compliance Solutions
Service Trust Portal, Compliance Manager, labels, DLP, retention, insider risk and audit.
- 5topics
- 27 minfast track
- 1diagrams and exhibits
- 20–25%of the exam
Topics in this chapter
Take them in order, or jump to the one you need.
- 1Service Trust Portal and Privacy PrinciplesSC-900 Service Trust Portal and privacy: the audit reports and guides Microsoft publishes, and its six privacy principles…5 min
- 2Purview Portal and Compliance ManagerSC-900 Purview and Compliance Manager: the Purview portal, assessments, improvement actions, Microsoft managed and customer…Diagram5 min
- 3Data Classification, Labels and DLPSC-900 Purview information protection: sensitive information types, classifiers, Content and Activity explorer, sensitivity…5 min
- 4Data Lifecycle, Records and GovernanceSC-900 Purview data lifecycle: retention policies and labels, records management, disposition review and data governance with the…6 min
- 5Insider Risk, eDiscovery and AuditSC-900 Purview investigations: insider risk management policies and indicators, eDiscovery cases and holds, and Audit Standard…6 min
About this chapter
What this chapter covers
This chapter covers how Microsoft helps organisations meet their legal and regulatory duties and protect sensitive data. Most of it is Microsoft Purview, a set of solutions for data security, data governance and compliance, plus the Service Trust Portal, where Microsoft publishes its own compliance evidence.
It carries about a fifth of the exam. Questions give a data protection or compliance need and ask which Purview feature meets it.
How the topics fit together
The pages follow the path from knowing what Microsoft offers, to finding and protecting data, to investigating problems.
- Service Trust Portal and privacy principles covers where to find Microsoft's audit reports and the six privacy principles.
- Purview portal and Compliance Manager covers the portal, assessments, improvement actions and the compliance score.
- Data classification, labels and DLP covers classifying content, Content explorer, Activity explorer, sensitivity labels and data loss prevention.
- Data lifecycle, records and governance covers retention policies and labels, records management and data governance.
- Insider risk, eDiscovery and audit covers insider risk management, eDiscovery and the audit solutions.
Several Purview features have similar names. For each one, remember the verb: labels classify and protect, DLP blocks sharing, retention keeps or deletes, and audit records.
How to use these pages
Each topic page has the same shape, so you can skim for what you need.
- What it is: the idea in plain words.
- How it works: the mechanism, with examples and tables.
- What to remember for the exam: the facts to memorise and how questions are phrased.
- Common mistakes: the classic traps.
- Check yourself: three questions to test your understanding.
Ready for more practice?
The full Microsoft SC-900 question bank has 503 questions, with timed practice exams and an explanation for every answer.
This study guide is independent and is not affiliated with, endorsed by, or sponsored by Microsoft. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.